# globus-gatekeeper Configuration

## Gatekeeper Service Port. The default, 2119, is registered as gsigatekeeper
## with IANA
# GLOBUS_GATEKEEPER_PORT="2119"

## Globus Installation Path
# GLOBUS_LOCATION="/usr"

## Gatekeeper Log Path. If not set, logging will be done via syslog
GLOBUS_GATEKEEPER_LOG="/var/log/globus-gatekeeper.log"

## Log facility to use for gatekeeper log messages. May be either a
## symbolic name of a POSIX.1 syslog facility, or an integer log
## facility constant
# GLOBUS_GATEKEEPER_LOG_FACILITY="LOG_DAEMON"

## Path to directory containing grid service descriptions
# GLOBUS_GATEKEEPER_GRID_SERVICES="/etc/grid-services"

## Gatekeeper gridmap file mapping X.509 identities to local users
# GLOBUS_GATEKEEPER_GRIDMAP="/etc/grid-security/grid-mapfile"

## Directory Containing Trusted X.509 certificates
# GLOBUS_GATEKEEPER_CERT_DIR="/etc/grid-security/certificates"

## File containing the service X.509 certificate
# GLOBUS_GATEKEEPER_CERT_FILE="/etc/grid-security/hostcert.pem"

## File containing the service private key
# GLOBUS_GATEKEEPER_KEY_FILE="/etc/grid-security/hostkey.pem"

## Flag indicating whether to try to use kerberos k5 service to translate
## x.509 credentials to kerberos tickets. Set to true to enable.
# GLOBUS_GATEKEEPER_KERBEROS_ENABLED=false

## Path to the globuskmap file. If this value is empty, then the default
## globuskmap file will be used if the GLOBUS_GATEKEEPER_KERBEROS_ENABLED
## option is set
# GLOBUS_GATEKEEPER_KMAP=""

## Path to store the PID of the gatekeeper daemon. This is used to stop
## the gatekeeper service using the init script interface
# GLOBUS_GATEKEEPER_PIDFILE="/var/run/globus-gatekeeper.pid"

## Niceness level to run the gatekeeper at
# GLOBUS_GATEKEEPER_NICE_LEVEL=0

export GLOBUS_TCP_PORT_RANGE="<%= @tcp_range %>"
export GLOBUS_USAGE_OPTOUT=<%= @usage_optout %>
